$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: cJOGrLB6qo0rz6jAwEkwz67FC3hLidCVS/LaUS27/Jk= Subject key identifier: 72:9E:D1:8D:66:13:9E:D4:12:9D:A7:98:C3:57:F9:D5:2B:14:7E:13 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 2C0A491870543AB6B1D6901F6C38348E2C1A541D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 010C Signing time: Thu 05 Jun 2025 10:01:40 +0000 Manifest this update: Thu 05 Jun 2025 09:56:40 +0000 Manifest next update: Sun 08 Jun 2025 15:50:40 +0000 Files and hashes: 1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: 4670mcEc0qPli9RYsvwTi+nWqneOrOcbQLGmZMqmCoY=) 2: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: QW0riT2ZIbJQ6bDdQHJpDVDRJpk68aw/94juFPRXEvU=) 3: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: q1try4eWeXGNMJXVZs9ilwAbNDidILu0Qdkiuiy95SY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:50:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:0a:49:18:70:54:3a:b6:b1:d6:90:1f:6c:38:34:8e:2c:1a:54:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Jun 5 09:56:40 2025 GMT Not After : Jun 8 15:50:40 2025 GMT Subject: CN=729ED18D66139ED4129DA798C357F9D52B147E13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c7:4a:f9:01:c3:cf:48:90:d3:67:ea:ec:7e: 14:38:4c:6e:16:7e:10:7b:35:5d:ea:4a:49:d1:5f: 67:7b:70:c9:af:43:70:72:85:c1:f8:82:06:a9:f0: bc:f5:42:18:2e:1a:36:71:f3:87:f7:3f:b7:3c:d9: 33:22:9f:d2:04:fe:19:00:17:04:2f:f3:ed:f4:7d: 6a:07:20:1f:f1:a7:08:29:94:04:87:a8:a6:1d:04: 03:92:63:26:68:50:68:65:47:a4:a1:63:11:2b:10: 6b:53:34:3b:76:cd:f9:66:89:54:74:ca:b7:ef:76: c2:1a:6c:a3:ca:c3:f8:5e:03:0e:e4:ef:fe:23:b5: dd:a6:57:00:3d:2f:f4:ee:fe:b4:2e:0d:1d:aa:7f: af:a5:25:61:ab:d6:d9:85:64:c1:3c:fb:aa:19:60: 88:96:b3:77:14:fc:83:63:8f:c2:25:ee:db:29:1e: 05:28:58:1e:dc:9c:e0:4e:44:e4:d8:f9:1d:c7:44: d3:6b:b2:69:0c:d4:83:0f:3a:33:d0:21:9f:ad:e3: 8e:78:a9:45:db:5a:a4:cf:7b:6a:c0:a5:0c:21:98: e0:a2:7f:78:fd:8b:0b:7c:2a:9e:7b:f0:e0:b9:0c: 64:e9:11:f5:74:e7:00:78:56:e3:f0:c5:32:d5:fa: 59:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:9E:D1:8D:66:13:9E:D4:12:9D:A7:98:C3:57:F9:D5:2B:14:7E:13 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:4e:3f:f4:85:a4:2c:9c:0d:30:28:d8:d0:84:eb:64:ce:1d: 9d:19:5a:b8:20:bb:ae:79:e7:9c:39:a4:a5:c7:87:b1:29:7f: dd:d5:e1:69:01:e1:9a:f8:33:e0:de:35:66:54:a5:1b:64:74: 37:3f:e0:a1:79:4a:c5:42:97:cb:d0:99:f6:72:6a:70:69:ae: 4c:63:f1:c1:5f:26:32:ee:7e:89:c7:85:5d:8c:72:4d:6b:a2: bd:7f:1e:bb:2a:32:82:f3:e4:16:9a:d8:ef:b1:41:eb:9a:9f: b4:6d:bd:70:76:39:48:a9:11:2a:02:95:ec:74:f7:cb:ce:9a: 8a:d1:19:dc:bd:f8:7e:62:12:87:fe:4a:ac:c6:b0:05:83:ef: 9f:95:dc:d6:2c:fc:70:67:bc:f4:c4:be:42:24:34:fe:10:ae: fa:c3:8b:27:29:0b:3a:43:e3:86:7c:b6:9b:56:1a:67:69:02: ee:4d:62:ae:64:04:8a:27:24:40:52:5f:a0:17:9e:47:fa:7c: 3b:59:cf:7b:cb:4c:11:94:a7:25:b5:39:30:d8:e8:7d:2e:ed: 33:54:2c:8b:4d:20:39:ce:72:ed:a5:10:4c:b3:68:57:11:38: d2:c9:97:63:16:85:8a:31:bb:11:8b:12:59:c1:58:d8:96:7c: 74:98:f3:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULApJGHBUOrax1pAfbDg0jiwaVB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNTA2MDUwOTU2NDBaFw0yNTA2MDgxNTUwNDBaMDMxMTAvBgNV BAMTKDcyOUVEMThENjYxMzlFRDQxMjlEQTc5OEMzNTdGOUQ1MkIxNDdFMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEx0r5AcPPSJDTZ+rsfhQ4TG4W fhB7NV3qSknRX2d7cMmvQ3ByhcH4ggap8Lz1QhguGjZx84f3P7c82TMin9IE/hkA FwQv8+30fWoHIB/xpwgplASHqKYdBAOSYyZoUGhlR6ShYxErEGtTNDt2zflmiVR0 yrfvdsIabKPKw/heAw7k7/4jtd2mVwA9L/Tu/rQuDR2qf6+lJWGr1tmFZME8+6oZ YIiWs3cU/INjj8Il7tspHgUoWB7cnOBOROTY+R3HRNNrsmkM1IMPOjPQIZ+t4454 qUXbWqTPe2rApQwhmOCif3j9iwt8Kp578OC5DGTpEfV05wB4VuPwxTLV+lnhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcp7RjWYTntQSnaeYw1f51SsUfhMwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdOP/SFpCycDTAo2NCE62TOHZ0ZWrggu655 55w5pKXHh7Epf93V4WkB4Zr4M+DeNWZUpRtkdDc/4KF5SsVCl8vQmfZyanBprkxj 8cFfJjLufonHhV2Mck1ror1/HrsqMoLz5Baa2O+xQeuan7RtvXB2OUipESoClex0 98vOmorRGdy9+H5iEof+SqzGsAWD75+V3NYs/HBnvPTEvkIkNP4QrvrDiycpCzpD 44Z8tptWGmdpAu5NYq5kBIonJEBSX6AXnkf6fDtZz3vLTBGUpyW1OTDY6H0u7TNU LItNIDnOcu2lEEyzaFcRONLJl2MWhYoxuxGLElnBWNiWfHSY89w= -----END CERTIFICATE-----Generated at Thu Jun 5 18:23:34 2025 by rpki-client